Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
File: 8669146b-a8f2-3481-86f9-c3d012bdc299.roa (raw, json)
Hash identifier: GH0CWFg/0Wo5IyTqij0HsGQR94WoKEPUxk+fuxEqXHU=
Subject key identifier: C3:BF:80:D3:F2:3A:0A:FB:A4:C6:9E:43:82:5B:B9:06:FA:DA:27:37
Certificate issuer: /CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Certificate serial: 010D0C9F43285848B35B656D9B571C2DBB78DA00
Authority key identifier: CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
Signing time: Wed 29 Jan 2025 02:00:39 +0000
ROA not before: Wed 29 Jan 2025 02:00:39 +0000
ROA not after: Tue 29 Apr 2025 01:00:39 +0000
asID: 14618
IP address blocks: 199.73.116.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:b3:5b:65:6d:9b:57:1c:2d:bb:78:da:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56dc9981-1d62-4501-a3ce-9ab389a49b4e
Validity
Not Before: Jan 29 02:00:39 2025 GMT
Not After : Apr 29 01:00:39 2025 GMT
Subject: CN=d18e11dd-64f4-40c1-ae28-e6d25dbb59a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:13:65:d7:99:87:99:85:1f:10:b2:69:05:9c:
40:a9:a1:db:df:07:33:e6:19:86:41:ea:a8:ae:cf:
e3:2e:ab:85:26:3a:8c:1a:f1:44:45:2f:14:47:7d:
08:1e:ce:c6:d0:d8:22:06:09:b6:4e:df:08:d4:16:
41:c4:26:92:78:91:71:f6:67:12:09:e4:c1:0c:bc:
34:6a:83:bc:41:ca:31:b3:ea:d8:88:39:f2:e6:6b:
0f:95:e4:3c:f1:14:52:0e:a1:1b:5f:97:0f:68:c8:
10:93:8d:0a:bb:97:02:7d:91:d6:12:48:d5:49:56:
5c:db:59:51:45:19:d5:8e:86:62:12:a7:e5:b1:0e:
54:c6:38:a5:a2:19:1a:8c:8d:9a:0a:25:d7:67:5d:
bc:c2:00:f1:49:b7:dc:d8:1f:5d:03:35:16:34:f4:
eb:4f:09:a3:ef:e1:05:a8:31:b3:4c:a6:b8:5d:be:
ad:31:ad:3c:07:1b:cf:ec:ba:6e:db:ec:6a:a5:2d:
0c:07:e2:8e:f0:75:af:23:1a:7c:28:1d:b6:9a:a9:
7e:36:d6:64:3b:53:84:7f:f5:a7:e4:67:a1:43:5e:
fd:85:81:56:c9:f8:33:47:f1:41:48:61:d2:57:63:
4a:8b:19:db:32:3f:fa:d5:ef:94:0f:b2:48:08:f7:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:80:D3:F2:3A:0A:FB:A4:C6:9E:43:82:5B:B9:06:FA:DA:27:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/8669146b-a8f2-3481-86f9-c3d012bdc299.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e/56dc9981-1d62-4501-a3ce-9ab389a49b4e.crl
X509v3 Authority Key Identifier:
keyid:CD:DD:67:3D:B3:FD:DE:2E:2C:C4:E9:E5:2D:9F:7D:F4:96:B0:2E:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/56dc9981-1d62-4501-a3ce-9ab389a49b4e.cer
sbgp-ipAddrBlock: critical
IPv4:
199.73.116.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6c:35:92:4e:c8:01:13:10:42:50:0c:f2:6c:9d:e6:99:54:fb:
fe:46:15:42:56:35:d0:5f:f4:b5:d5:0d:23:a0:3f:83:cb:56:
9d:1d:a2:c7:d2:db:f1:a5:04:26:2f:53:de:87:cf:6a:97:30:
7e:ea:5e:76:ed:8e:07:bf:67:89:33:91:f1:80:86:06:c6:c1:
42:ba:36:ae:0b:c7:a7:67:ef:31:35:3b:8c:1e:39:31:43:a7:
13:88:e9:ce:78:d1:07:14:88:4f:c7:28:f5:5b:31:05:f9:b0:
be:ad:2b:79:89:c6:c8:dd:38:7c:34:7c:0c:9c:84:ca:a1:11:
57:1c:67:f5:15:87:18:99:0e:43:da:43:4a:61:67:67:01:e3:
eb:8f:bc:76:d8:f6:3d:18:4a:19:22:44:21:18:2d:33:91:a2:
5b:32:a2:cd:5d:d3:a4:b0:94:3e:98:35:d1:a2:ab:4f:d0:e5:
9f:1d:38:a9:62:17:08:be:3a:31:f4:dc:ed:cd:ff:84:84:cb:
77:ba:55:80:32:89:54:76:af:8f:5d:d8:d2:85:b7:58:c5:4c:
67:6f:d0:4f:03:bd:99:c4:ea:6e:c3:e6:51:0d:20:86:c5:53:
c7:96:04:b6:03:a4:fa:83:64:ba:06:e2:f3:64:9c:e9:24:e8:
25:07:23:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:43:08 2025 by rpki-client